Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,778 questions
mikrotik azure s2s -cannot ping each other
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 87%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Bartolomeo Styblinskia
0
Reputation points
The S2S VPN is working between MikroTik and Azure, but I cannot ping the Debian VM on Azure, and vice versa.
ip route from debian:
default via 9.0.0.1 dev eth0 proto dhcp src 9.0.0.5 metric 100
9.0.0.0/26 dev eth0 proto kernel scope link src 9.0.0.5 metric 100
9.0.0.1 dev eth0 proto dhcp scope link src 9.0.0.5 metric 100
168.63.129.16 via 9.0.0.1 dev eth0 proto dhcp src 9.0.0.5 metric 100
169.254.169.254 via 9.0.0.1 dev eth0 proto dhcp src 9.0.0.5 metric 100
it looks like vmgateway is not connected to vmnet howewer debian vm took correct ip address from the private virtual address network scope
Azure Virtual Network
{count} votes
-
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator2024-11-27T05:00:07.2+00:00 Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you are trying to set up a S2S Connection between a router and Azure VPN Gateway
Make sure your device is a part of Validated VPN devices and device configuration guides.
Note that you should not check the routes from within the OS
- VM's OS would not be aware of the routes the VNET or Azure VFP learns
- If you'd like to check the effective routes of a VM, consider using NIC Effective routes
- The nextHop for OnPrem address range should be showing as "VirtualNetworkGateway"
- If you had changed the routing of the VM at OS level, please revert them back to default.
As next steps,
- Can you confirm if the OnPrem address range's nextHop is showing as "VirtualNetworkGateway" from NIC Effective routes
- Please share a screenshot
- Is the VPN Connection status showing as Connected?
- Make sure NSGs allow traffic to and well as from VM to the OnPrem server IP
- Use IP flow verify overview
- Please share a screenshot
- Also, make sure your OnPREM firewall allows to and fro traffic
- Is there any reason you are using ICMP Ping?
- Make sure the Azure VM's NSG, OS Level firewall and the OnPrem server all allow ICMP Ping
- I would suggest you test connectivity using TCPPing on port 22 (or an active listening port)
Cheers,
Kapil
Sign in to comment
Sign in to answer